dnsapi.dll

  • File Path: C:\Windows\SysWOW64\dnsapi.dll
  • Description: DNS Client API DLL

Hashes

Type Hash
MD5 4116BF1EEA2BA39A56C83274AA6D92D8
SHA1 B4C5F89C56F2F281F7D3476F97E15186167C8584
SHA256 1DF0241421AB302C3086DA54D6EB100B0CD155426BF640C3F0CE8620F79B6D19
SHA384 5B2F9A5035DC45DE8BF74F116187DA8C8FF8FF4AC1EFEFBE20B71DCF52DB36383AB2FD2DB547EA94C8D483AA03BED93B
SHA512 B14F7B8E70328078715CD026E54518FF91167BBDE7B2AFCDDF26AE2D9A92BEA44D583755FF540AC680865C5C393A04170CF3F9901C38002B345B4295BA3A1E65
SSDEEP 12288:TZiGAx2/xVFFGZCft6WPJOVEvYbndfH0iKoFL/unkrKNR:ToLkTF9gWOVVbdPYw/unkrKL
IMP 7113933192DB4996FA2203BD225ABBDE
PESHA1 B0797FCF5771553709EFC22FDF25CDDCD21CEF19
PE256 6323484A5D93BCC596B14F1DB38A3B07B42BEB8A1DCF9E1B9B91E117C3341B7D

DLL Exports:

Function Name Ordinal Type
DnsServiceCopyInstance 160 Exported Function
DnsServiceDeRegister 161 Exported Function
DnsServiceBrowseCancel 158 Exported Function
DnsServiceConstructInstance 159 Exported Function
DnsServiceFreeInstance 162 Exported Function
DnsServiceResolve 165 Exported Function
DnsServiceResolveCancel 166 Exported Function
DnsServiceRegister 163 Exported Function
DnsServiceRegisterCancel 164 Exported Function
DnsReplaceRecordSetUTF8 151 Exported Function
DnsReplaceRecordSetW 152 Exported Function
DnsRemoveRegistrations 149 Exported Function
DnsReplaceRecordSetA 150 Exported Function
DnsResetQueryRetryTimeouts 153 Exported Function
DnsScreenLocalAddrsForRegistration 156 Exported Function
DnsServiceBrowse 157 Exported Function
DnsResolverOp 154 Exported Function
DnsResolverQueryHvsi 155 Exported Function
DnsTraceServerConfig 177 Exported Function
DnsUnicodeToUtf8 7 Exported Function
DnsStopMulticastQuery 175 Exported Function
DnsStringCopyAllocateEx 176 Exported Function
DnsUpdate 178 Exported Function
DnsUpdateTest_UTF8 181 Exported Function
DnsUpdateTest_W 182 Exported Function
DnsUpdateMachinePresence 179 Exported Function
DnsUpdateTest_A 180 Exported Function
DnsSetInterfaceSettings 169 Exported Function
DnsSetNrptRule 170 Exported Function
DnsSetConfigDword 167 Exported Function
DnsSetConfigValue 168 Exported Function
DnsSetNrptRules 171 Exported Function
DnsStartMulticastQuery 174 Exported Function
DnsStatusString 6 Exported Function
DnsSetQueryRetryTimeouts 172 Exported Function
DnsSetSettings 173 Exported Function
DnsQuery_A 131 Exported Function
DnsQuery_UTF8 132 Exported Function
DnsNotifyResolverClusterIp 122 Exported Function
DnsNotifyResolverEx 123 Exported Function
DnsQuery_W 133 Exported Function
DnsQueryConfigDword 126 Exported Function
DnsQueryEx 127 Exported Function
DnsQueryConfig 124 Exported Function
DnsQueryConfigAllocEx 125 Exported Function
DnsNameCompareEx_UTF8 112 Exported Function
DnsNameCompareEx_W 113 Exported Function
DnsNameCompare_W 116 Exported Function
DnsNameCompareEx_A 111 Exported Function
DnsNameCopy 117 Exported Function
DnsNetworkInformation_CreateFromFAZ 120 Exported Function
DnsNotifyResolver 121 Exported Function
DnsNameCopyAllocate 118 Exported Function
DnsNetworkInfo_CreateFromFAZ 119 Exported Function
DnsRecordSetDetach 142 Exported Function
DnsRecordStringForType 143 Exported Function
DnsRecordSetCompare 140 Exported Function
DnsRecordSetCopyEx 141 Exported Function
DnsRecordStringForWritableType 144 Exported Function
DnsReleaseContextHandle 147 Exported Function
DnsRemoveNrptRule 148 Exported Function
DnsRecordTypeForName 145 Exported Function
DnsRegisterLocal 146 Exported Function
DnsQueryExW 130 Exported Function
DnsRecordBuild_UTF8 134 Exported Function
DnsQueryExA 128 Exported Function
DnsQueryExUTF8 129 Exported Function
DnsRecordBuild_W 135 Exported Function
DnsRecordListFree 138 Exported Function
DnsRecordListUnmapV4MappedAAAAInPlace 139 Exported Function
DnsRecordCompare 136 Exported Function
DnsRecordCopyEx 137 Exported Function
Security_ContextListTimeout 265 Exported Function
Send_AndRecvUdpWithParam 266 Exported Function
Reg_ReadGlobalsEx 263 Exported Function
Reg_ReadUpdateInfo 264 Exported Function
Send_MessagePrivate 267 Exported Function
Socket_CacheCleanup 270 Exported Function
Socket_CacheInit 271 Exported Function
Send_MessagePrivateEx 268 Exported Function
Send_OpenTcpConnectionAndSend 269 Exported Function
NetInfo_UpdateNetworkProperties 256 Exported Function
NetInfo_UpdateServerReachability 257 Exported Function
NetInfo_ResetServerPriorities 254 Exported Function
NetInfo_UpdateDnsInterfaceConfigChange 255 Exported Function
Query_Cancel 259 Exported Function
Reg_FreeUpdateInfo 261 Exported Function
Reg_GetValueEx 262 Exported Function
Query_Main 260 Exported Function
QueryDirectEx 258 Exported Function
Socket_SetTtl 283 Exported Function
Socket_TcpListen 284 Exported Function
Socket_SetMulticastInterface 281 Exported Function
Socket_SetMulticastLoopBack 282 Exported Function
Trace_Reset 285 Exported Function
Util_IsRunningOnXboxOne 288 Exported Function
WriteDnsNrptRulesToRegistry 289 Exported Function
Update_ReplaceAddressRecordsW 286 Exported Function
Util_IsIp6Running 287 Exported Function
Socket_CloseEx 274 Exported Function
Socket_CloseMessageSockets 275 Exported Function
Socket_CleanupWinsock 272 Exported Function
Socket_ClearMessageSockets 273 Exported Function
Socket_Create 276 Exported Function
Socket_JoinMulticast 279 Exported Function
Socket_RecvFrom 280 Exported Function
Socket_CreateMulticast 277 Exported Function
Socket_InitWinsock 278 Exported Function
DnsWriteQuestionToBuffer_UTF8 193 Exported Function
DnsWriteQuestionToBuffer_W 194 Exported Function
DnsValidateServerStatus 189 Exported Function
DnsValidateUtf8Byte 192 Exported Function
DnsWriteReverseNameStringForIpAddress 195 Exported Function
FlushDnsPolicyUnreachableStatus 234 Exported Function
GetCurrentTimeInSeconds 235 Exported Function
ExtraInfo_Init 232 Exported Function
Faz_AreServerListsInSameNameSpace 233 Exported Function
DnsValidateName_UTF8 185 Exported Function
DnsValidateName_W 186 Exported Function
DnsUtf8ToUnicode 8 Exported Function
DnsValidateName_A 184 Exported Function
DnsValidateNameOrIp_TempW 183 Exported Function
DnsValidateServerArray_A 187 Exported Function
DnsValidateServerArray_W 188 Exported Function
DnsValidateServer_A 190 Exported Function
DnsValidateServer_W 191 Exported Function
NetInfo_Free 247 Exported Function
NetInfo_GetAdapterByAddress 248 Exported Function
NetInfo_CopyNetworkIndex 245 Exported Function
NetInfo_CreatePerNetworkNetinfo 246 Exported Function
NetInfo_GetAdapterByInterfaceIndex 249 Exported Function
NetInfo_IsForUpdate 252 Exported Function
NetInfo_IsTcpipConfigChange 253 Exported Function
NetInfo_GetAdapterByName 250 Exported Function
NetInfo_IsAddrConfig 251 Exported Function
HostsFile_ReadLine 238 Exported Function
IpHelp_IsAddrOnLink 239 Exported Function
HostsFile_Close 236 Exported Function
HostsFile_Open 237 Exported Function
Local_GetRecordsForLocalName 240 Exported Function
NetInfo_Clean 243 Exported Function
NetInfo_Copy 244 Exported Function
Local_GetRecordsForLocalNameEx 241 Exported Function
NetInfo_Build 242 Exported Function
DnsNameCompare_UTF8 115 Exported Function
Dns_WriteRecordStructureToPacketEx 231 Exported Function
DnsAcquireContextHandle_A 21 Exported Function
Dns_WriteDottedNameToPacket 12 Exported Function
Dns_WriteQuestionToMessage 230 Exported Function
DnsAcquireContextHandle_W 22 Exported Function
DnsApiAllocZero 25 Exported Function
DnsApiFree 26 Exported Function
DnsAllocateRecord 23 Exported Function
DnsApiAlloc 24 Exported Function
Dns_SetRecordDatalength 224 Exported Function
Dns_SetRecordsSection 225 Exported Function
Dns_SendAndRecvUdp 222 Exported Function
Dns_SendEx 223 Exported Function
Dns_SetRecordsTtl 226 Exported Function
Dns_UpdateLib 228 Exported Function
Dns_UpdateLibEx 229 Exported Function
Dns_SkipPacketName 11 Exported Function
Dns_SkipToRecord 227 Exported Function
DnsConnectionDeletePolicyEntriesPrivate 38 Exported Function
DnsConnectionDeleteProxyInfo 39 Exported Function
DnsCleanupTcpConnections 36 Exported Function
DnsConnectionDeletePolicyEntries 37 Exported Function
DnsConnectionFreeNameList 40 Exported Function
DnsConnectionFreeProxyList 43 Exported Function
DnsConnectionGetHandleForHostUrlPrivate 44 Exported Function
DnsConnectionFreeProxyInfo 41 Exported Function
DnsConnectionFreeProxyInfoEx 42 Exported Function
DnsApiSetDebugGlobals 29 Exported Function
DnsAsyncRegisterHostAddrs 30 Exported Function
DnsApiHeapReset 27 Exported Function
DnsApiRealloc 28 Exported Function
DnsAsyncRegisterInit 31 Exported Function
DnsCheckNrptRuleIntegrity 34 Exported Function
DnsCheckNrptRules 35 Exported Function
DnsAsyncRegisterTerm 32 Exported Function
DnsCancelQuery 33 Exported Function
Dns_CacheServiceCleanup 199 Exported Function
Dns_CacheServiceInit 200 Exported Function
Dns_AllocateMsgBuf 197 Exported Function
Dns_BuildPacket 198 Exported Function
Dns_CacheServiceStopIssued 201 Exported Function
Dns_CloseSocket 204 Exported Function
Dns_CreateMulticastSocket 205 Exported Function
Dns_CleanupWinsock 202 Exported Function
Dns_CloseConnection 203 Exported Function
AddRefQueryBlobEx 15 Exported Function
BreakRecordsIntoBlob 16 Exported Function
AdaptiveTimeout_ClearInterfaceSpecificConfiguration 13 Exported Function
AdaptiveTimeout_ResetAdaptiveTimeout 14 Exported Function
Coalesce_UpdateNetVersion 17 Exported Function
DeRefQueryBlobEx 19 Exported Function
Dns_AddRecordsToMessage 196 Exported Function
CombineRecordsInBlob 18 Exported Function
DelaySortDAServerlist 20 Exported Function
Dns_ParsePacketRecord 217 Exported Function
Dns_PingAdapterServers 218 Exported Function
Dns_OpenTcpConnectionAndSend 215 Exported Function
Dns_ParseMessage 216 Exported Function
Dns_ReadPacketName 9 Exported Function
Dns_RecvTcp 220 Exported Function
Dns_ResetNetworkInfo 221 Exported Function
Dns_ReadPacketNameAllocate 10 Exported Function
Dns_ReadRecordStructureFromPacket 219 Exported Function
Dns_ExtractRecordsFromMessage 208 Exported Function
Dns_FindAuthoritativeZoneLib 209 Exported Function
Dns_CreateSocket 206 Exported Function
Dns_CreateSocketEx 207 Exported Function
Dns_FreeMsgBuf 210 Exported Function
Dns_InitializeMsgRemoteSockaddr 213 Exported Function
Dns_InitializeWinsock 214 Exported Function
Dns_GetRandomXid 211 Exported Function
Dns_InitializeMsgBuf 212 Exported Function
DnsGetDnsServerList 92 Exported Function
DnsGetDomainName 1 Exported Function
DnsGetCacheDataTable 90 Exported Function
DnsGetCacheDataTableEx 91 Exported Function
DnsGetInterfaceSettings 93 Exported Function
DnsGetPolicyTableInfo 96 Exported Function
DnsGetPolicyTableInfoPrivate 97 Exported Function
DnsGetLastFailedUpdateInfo 94 Exported Function
DnsGetNrptRuleNamesList 95 Exported Function
DnsFreeNrptRule 83 Exported Function
DnsFreeNrptRuleNamesList 84 Exported Function
DnsFreeAdaptersInfo 81 Exported Function
DnsFreeConfigStructure 82 Exported Function
DnsFreePolicyConfig 85 Exported Function
DnsGetApplicationIdentifier 88 Exported Function
DnsGetBufferLengthForStringCopy 89 Exported Function
DnsFreeProxyName 86 Exported Function
DnsGetAdaptersInfo 87 Exported Function
DnsIsStringCountValidForTextType 106 Exported Function
DnsLogEvent 107 Exported Function
DnsIsNSECType 3 Exported Function
DnsIsStatusRcode 4 Exported Function
DnsMapRcodeToStatus 5 Exported Function
DnsModifyRecordsInSet_W 110 Exported Function
DnsNameCompare_A 114 Exported Function
DnsModifyRecordsInSet_A 108 Exported Function
DnsModifyRecordsInSet_UTF8 109 Exported Function
DnsGetProxyInformation 100 Exported Function
DnsGetQueryRetryTimeouts 101 Exported Function
DnsGetPrimaryDomainName_A 98 Exported Function
DnsGetProxyInfoPrivate 99 Exported Function
DnsGetSettings 102 Exported Function
DnsIpv6StringToAddress 105 Exported Function
DnsIsAMailboxType 2 Exported Function
DnsGlobals 103 Exported Function
DnsIpv6AddressToString 104 Exported Function
DnsCreateStringCopy 56 Exported Function
DnsDeRegisterLocal 57 Exported Function
DnsCreateReverseNameStringForIpAddress 54 Exported Function
DnsCreateStandardDnsNameCopy 55 Exported Function
DnsDhcpRegisterAddrs 58 Exported Function
DnsDhcpRegisterTerm 61 Exported Function
DnsDhcpRemoveRegistrations 62 Exported Function
DnsDhcpRegisterHostAddrs 59 Exported Function
DnsDhcpRegisterInit 60 Exported Function
DnsConnectionGetProxyInfoForHostUrl 47 Exported Function
DnsConnectionGetProxyList 48 Exported Function
DnsConnectionGetNameList 45 Exported Function
DnsConnectionGetProxyInfo 46 Exported Function
DnsConnectionSetPolicyEntries 49 Exported Function
DnsConnectionUpdateIfIndexTable 52 Exported Function
DnsCopyStringEx 53 Exported Function
DnsConnectionSetPolicyEntriesPrivate 50 Exported Function
DnsConnectionSetProxyInfo 51 Exported Function
DnsExtractRecordsFromMessage_W 74 Exported Function
DnsFindAuthoritativeZone 75 Exported Function
DnsDowncaseDnsNameLabel 72 Exported Function
DnsExtractRecordsFromMessage_UTF8 73 Exported Function
DnsFlushResolverCache 76 Exported Function
DnsFlushResolverCacheEntry_W 79 Exported Function
DnsFree 80 Exported Function
DnsFlushResolverCacheEntry_A 77 Exported Function
DnsFlushResolverCacheEntry_UTF8 78 Exported Function
DnsDhcpSrvRegisterHostName 65 Exported Function
DnsDhcpSrvRegisterHostNameEx 66 Exported Function
DnsDhcpSrvRegisterHostAddr 63 Exported Function
DnsDhcpSrvRegisterHostAddrEx 64 Exported Function
DnsDhcpSrvRegisterInit 67 Exported Function
DnsDhcpSrvRegisterTerm 70 Exported Function
DnsDisableIdnEncoding 71 Exported Function
DnsDhcpSrvRegisterInitEx 68 Exported Function
DnsDhcpSrvRegisterInitialize 69 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: dnsapi
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.508 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.508
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/64
  • VirusTotal Link: https://www.virustotal.com/gui/file/1df0241421ab302c3086da54d6eb100b0cd155426bf640c3f0ce8620f79b6d19/detection/

Possible Misuse

The following table contains possible examples of dnsapi.dll being misused. While dnsapi.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
malware-ioc rtm dnsapi.dll © ESET 2014-2018
signature-base apt_codoso.yar $s1 = “DnsApi.dll” fullword ascii CC BY-NC 4.0
signature-base gen_excel_xll_addin_suspicious.yar or (pe.imports(“DNSAPI.dll”, “DnsQuery_A”) or pe.imports(“DNSAPI.dll”, “DnsQuery_W”)) CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.