cliconfg.exe

  • File Path: C:\windows\SysWOW64\cliconfg.exe
  • Description: SQL Client Configuration Utility EXE

Screenshot

cliconfg.exe

Hashes

Type Hash
MD5 D742C17757BA63F0FB22715C3E0CFF68
SHA1 1697CC917798DECF6A43088F339E8948EE596C8C
SHA256 18CEE4DD64171378598E362309BEE02E6A4B16119AEEF5D19FA8384766DEBDF1
SHA384 65AA1C2BFFD7B60309B0B4CA1FAEC0B5FFE32D7871142F885FF358106D71E79BC53871069672B7FFD52A424EC649DA66
SHA512 6AAEAA5D35959EF5B7C33E1B2348CBB7816B93B17A6331151C9290BF92204B7E5643C6E3CB3912776CA742E3058533CAD4EDD0600D6C17F000824E4EA1F69080
SSDEEP 384:h5XS7aGvJGWWCwWSPXuNvBQAMYJQ2JQSkdowyoh:h8GWJGKwuI30lJBkvT

Signature

  • Status: The file C:\windows\SysWOW64\cliconfg.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at http://go.microsoft.com/fwlink/?LinkID=135170
  • Serial: ``
  • Thumbprint: ``
  • Issuer:
  • Subject:

File Metadata

  • Original Filename: cliconfg.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 6.3.9600.17415 (winblue_r4.141028-1500)
  • Product Version: 6.3.9600.17415
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\windows\system32\cliconfg.exe 69
C:\WINDOWS\system32\cliconfg.exe 58
C:\Windows\system32\cliconfg.exe 63
C:\WINDOWS\system32\cliconfg.exe 63
C:\Windows\system32\cliconfg.exe 66
C:\Windows\system32\cliconfg.exe 63
C:\WINDOWS\SysWOW64\cliconfg.exe 65
C:\WINDOWS\SysWOW64\cliconfg.exe 68
C:\Windows\SysWOW64\cliconfg.exe 71
C:\Windows\SysWOW64\cliconfg.exe 69
C:\Windows\SysWOW64\cliconfg.exe 66

Possible Misuse

The following table contains possible examples of cliconfg.exe being misused. While cliconfg.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
signature-base apt_op_honeybee.yar $x2 = “del /f /q %TEMP%\setup.cab && cliconfg.exe” CC BY-NC 4.0
signature-base apt_op_honeybee.yar $x1 = “cmd /c taskkill /im cliconfg.exe /f /t && del /f /q” fullword ascii CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.