cliconfg.exe

  • File Path: C:\WINDOWS\system32\cliconfg.exe
  • Description: SQL Client Configuration Utility EXE

Screenshot

cliconfg.exe

Hashes

Type Hash
MD5 23270B94D888BC3AC565E97C8DD6F4BB
SHA1 4B66D4EFB750DFE9A920A791CD52B25D298B0C44
SHA256 3EBAF377CCCEF1B14713DDDFBB9CDE592C46FA96661A5450C77CB25C2BE5B9CB
SHA384 36AF178FFA5157A4686E087488218DD255CC23231EA12A7AD7545A620EA1602106BEB26CA50DA7D3C17741479E683243
SHA512 74A27D330DCA34FC6CA63A2777D6164DB9E3726EC7222DF089430B42F5CDC61DAA58A43A0487C0E6E3833ED444AE4F9C250DD355D956BFA387B954A6EA00859E
SSDEEP 384:TLbyf4WRmiKCkPCRDCDxPThhWFwWGPXuNvBQAMYJQ2JQSkdowyo:fbynRmPzQEuI30lJBkvT

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: cliconfg.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.1 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\windows\system32\cliconfg.exe 55
C:\Windows\system32\cliconfg.exe 75
C:\WINDOWS\system32\cliconfg.exe 63
C:\Windows\system32\cliconfg.exe 61
C:\Windows\system32\cliconfg.exe 58
C:\WINDOWS\SysWOW64\cliconfg.exe 61
C:\WINDOWS\SysWOW64\cliconfg.exe 65
C:\Windows\SysWOW64\cliconfg.exe 61
C:\Windows\SysWOW64\cliconfg.exe 61
C:\Windows\SysWOW64\cliconfg.exe 63
C:\windows\SysWOW64\cliconfg.exe 58

Possible Misuse

The following table contains possible examples of cliconfg.exe being misused. While cliconfg.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
signature-base apt_op_honeybee.yar $x2 = “del /f /q %TEMP%\setup.cab && cliconfg.exe” CC BY-NC 4.0
signature-base apt_op_honeybee.yar $x1 = “cmd /c taskkill /im cliconfg.exe /f /t && del /f /q” fullword ascii CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.