Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.Data.SqlClient.SNI.x64.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Microsoft.Data.SqlClient.SNI.x64.dll
Resource
win10v2004-20240508-en
Target
Microsoft.Data.SqlClient.SNI.x64.dll
Size
486KB
MD5
3fdd2ec0889bd779651ea391a71c3e00
SHA1
c2b2c31572f6baf924738f26580cbe8271955e3e
SHA256
219b41f598f95c96e452aabf09cffdec41f1d043d7986ec37af9483e3b54c988
SHA512
6e17667a3de2599d6624b3fbfa004be3a9b3a465503b36164ad8395e19dc779a2cdbd6cd1bf483a3304d833aefa891e8f89d4113821099e15c228a3cdd89b645
SSDEEP
6144:WSUV5QVcQTVwM2WVKJ1Lwzbv4m1ZkRB5Qt41As7:hEQT2WwDWvZkRB2ti7
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Microsoft.Data.SqlClient.SNI.pdb
InitializeSListHead
CreateIoCompletionPort
TlsSetValue
FormatMessageW
TlsAlloc
TlsGetValue
TlsFree
MultiByteToWideChar
SetHandleInformation
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
VerifyVersionInfoW
GetComputerNameW
VerSetConditionMask
CreateThread
GetSystemDirectoryA
FileTimeToSystemTime
CompareStringA
GetVersionExW
GetQueuedCompletionStatus
SetEvent
WaitForMultipleObjects
WideCharToMultiByte
LCMapStringW
CompareStringW
SetFileCompletionNotificationModes
WaitNamedPipeW
GetTickCount
GetOverlappedResult
Sleep
DisconnectNamedPipe
CreateFileW
PeekNamedPipe
WriteFile
GetCurrentProcess
SetNamedPipeHandleState
ReadFile
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleHandleExW
WriteConsoleW
HeapReAlloc
HeapSize
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
SetFilePointerEx
GetFileSizeEx
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
QueryDepthSList
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
CreateEventW
PostQueuedCompletionStatus
CreateSemaphoreW
DeleteCriticalSection
CloseHandle
GetLastError
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
ReleaseSemaphore
EnterCriticalSection
SetLastError
RtlUnwindEx
RtlPcToFileHeader
RaiseException
EncodePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
ExitProcess
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
EventUnregister
IsTokenRestricted
EventWriteTransfer
EventRegister
ImpersonateNamedPipeClient
RegEnumKeyExA
RegQueryInfoKeyA
RevertToSelf
CryptDestroyKey
CryptAcquireContextW
CryptReleaseContext
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
UuidCreate
CharNextW
CharNextA
CharNextExA
WSACleanup
__WSAFDIsSet
FreeAddrInfoW
closesocket
select
WSAStringToAddressW
getsockname
socket
GetAddrInfoW
recv
WSAPoll
htons
sendto
setsockopt
getpeername
WSAGetLastError
WSARecv
shutdown
WSASend
WSAIoctl
GetNameInfoW
WSAEnumProtocolsW
connect
htonl
ntohs
bind
WSAStartup
CryptAcquireCertificatePrivateKey
CertOpenSystemStoreA
CertFreeCertificateContext
CertVerifyTimeValidity
CertCloseStore
CertFindCertificateInStore
CertOpenStore
CryptStringToBinaryW
CertGetCertificateContextProperty
?_TlgEvent@?6??SNIPacketRelease@@9@4U<unnamed-type-_TlgEvent>@?6??1@YAXPEAVSNI_Packet@@@Z@B
?_TlgEvent@?BC@??SNIPacketRelease@@9@4U<unnamed-type-_TlgEvent>@?BC@??1@YAXPEAVSNI_Packet@@@Z@B
?_TlgEvent@?BN@??SNIPacketRelease@@9@4U<unnamed-type-_TlgEvent>@?BN@??1@YAXPEAVSNI_Packet@@@Z@B
GetSniMaxComposedSpnLength
SNIAddProviderWrapper
SNICheckConnectionWrapper
SNICloseWrapper
SNIGetInfoWrapper
SNIGetLastError
SNIGetPeerAddrStrWrapper
SNIInitialize
SNIOpenSyncExWrapper
SNIOpenWrapper
SNIPacketAllocateWrapper
SNIPacketGetDataWrapper
SNIPacketRelease
SNIPacketResetWrapper
SNIPacketSetData
SNIQueryInfo
SNIReadAsyncWrapper
SNIReadSyncOverAsync
SNIRemoveProviderWrapper
SNISecGenClientContextWrapper
SNISecInitPackage
SNISetInfoWrapper
SNITerminate
SNIWaitForSSLHandshakeToCompleteWrapper
SNIWriteAsyncWrapper
SNIWriteSyncOverAsync
UnmanagedIsTokenRestricted
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ