dsrole.dll

  • File Path: C:\Windows\system32\dsrole.dll
  • Description: DS Setup Client DLL

Hashes

Type Hash
MD5 5F783D6A734F0C7DD6305FBAB31D5475
SHA1 34FCBF6D4679F888158CFBE787536C356002D9F9
SHA256 199F4137670A8621EC72C2AE263EB18678F814A8987FC875F4A83C1EA1AA5CFD
SHA384 CFA635DB122BA922A9D8DCEE52C866D8859B7E20251A5E51C90D7A41AB3450E70D442BFD250A61DF7F9251D2C65CA988
SHA512 0350AD345E8A5BE107059EFB094D58992EE11336B8A9BFF6461A218696BDEF028FF1BD00CFC5F199625842266F1DC045657C72292DC12E79BDD4B4A88E167C7D
SSDEEP 384:R0VS2D55A6p/xwyro0z3wylF6pjIVQYa/W1CW/D1IDBRJtelI:R0V557xj3zlF+cVdaKlI1P
IMP 725D60F29A28179D14B861E99E24E3C2
PESHA1 B92C971EFD9B5EC129848A750D09F47C54EA77A2
PE256 29651E74F7462A357AE52E9649C164F9028CFA4F4A45D731BCE0CFF3E108F2AA

DLL Exports:

Function Name Ordinal Type
DsRoleGetPrimaryDomainInformation 2 Exported Function
DsRoleFreeMemory 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DSROLE.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/199f4137670a8621ec72c2ae263eb18678f814a8987fc875f4a83c1ea1aa5cfd/detection/

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\TabTip32.exe 33
C:\Windows\system32\69fe178f-26e7-43a9-aa7d-2b616b672dde_eventlogservice.dll 35
C:\Windows\system32\AppVClientPS.dll 27
C:\Windows\system32\AppVSentinel.dll 36
C:\Windows\system32\AppVTerminator.dll 40
C:\Windows\system32\avrt.dll 35
C:\Windows\system32\backgroundTaskHost.exe 32
C:\Windows\system32\bootstr.dll 32
C:\Windows\system32\BOOTVID.DLL 30
C:\Windows\system32\computelibeventlog.dll 35
C:\Windows\system32\DefaultDeviceManager.dll 36
C:\Windows\system32\DeviceCensus.exe 33
C:\WINDOWS\system32\DeviceCensus.exe 33
C:\Windows\system32\dllhost.exe 32
C:\Windows\system32\downlevel\api-ms-win-base-util-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-core-com-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-comm-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-core-console-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-datetime-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-datetime-l1-1-1.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-debug-l1-1-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-debug-l1-1-1.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-delayload-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-core-errorhandling-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-errorhandling-l1-1-1.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-fibers-l1-1-0.dll 27
C:\Windows\system32\downlevel\api-ms-win-core-fibers-l1-1-1.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-file-l1-1-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-file-l1-2-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-file-l1-2-1.dll 29
C:\Windows\system32\downlevel\API-MS-Win-core-file-l2-1-0.dll 32
C:\Windows\system32\downlevel\API-MS-Win-core-file-l2-1-1.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-handle-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-heap-l1-1-0.dll 38
C:\Windows\system32\downlevel\API-MS-Win-Core-Heap-Obsolete-L1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-core-interlocked-l1-1-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-io-l1-1-0.dll 40
C:\Windows\system32\downlevel\api-ms-win-core-io-l1-1-1.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-kernel32-legacy-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-kernel32-legacy-l1-1-1.dll 27
C:\Windows\system32\downlevel\API-MS-Win-Core-Kernel32-Private-L1-1-0.dll 35
C:\Windows\system32\downlevel\API-MS-Win-Core-Kernel32-Private-L1-1-1.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-libraryloader-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-libraryloader-l1-1-1.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-localization-l1-2-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-localization-l1-2-1.dll 32
C:\Windows\system32\downlevel\API-MS-Win-core-localization-obsolete-l1-2-0.dll 40
C:\Windows\system32\downlevel\api-ms-win-core-memory-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-memory-l1-1-1.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-memory-l1-1-2.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-namedpipe-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-core-privateprofile-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-privateprofile-l1-1-1.dll 29
C:\Windows\system32\downlevel\api-ms-win-core-processenvironment-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-processenvironment-l1-2-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-processthreads-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-processthreads-l1-1-1.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-processthreads-l1-1-2.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-processtopology-obsolete-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-profile-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-realtime-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-registry-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-registry-l2-1-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-rtlsupport-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-shlwapi-legacy-l1-1-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 40
C:\Windows\system32\downlevel\api-ms-win-core-shutdown-l1-1-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-stringansi-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-string-l1-1-0.dll 35
C:\Windows\system32\downlevel\API-MS-Win-core-string-l2-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-stringloader-l1-1-1.dll 33
C:\Windows\system32\downlevel\API-MS-Win-core-string-obsolete-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-core-synch-l1-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-core-synch-l1-2-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-sysinfo-l1-1-0.dll 27
C:\Windows\system32\downlevel\api-ms-win-core-sysinfo-l1-2-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-sysinfo-l1-2-1.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-threadpool-l1-2-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-threadpool-legacy-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-threadpool-private-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-timezone-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-url-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-util-l1-1-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-version-l1-1-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-wow64-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-xstate-l1-1-0.dll 35
C:\Windows\system32\downlevel\API-MS-Win-core-xstate-l2-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-crt-conio-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-crt-convert-l1-1-0.dll 41
C:\Windows\system32\downlevel\api-ms-win-crt-environment-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-crt-filesystem-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-crt-heap-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-crt-locale-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-crt-math-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-crt-multibyte-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-crt-process-l1-1-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-crt-runtime-l1-1-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-crt-stdio-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-crt-string-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-crt-time-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-crt-utility-l1-1-0.dll 32
C:\Windows\system32\downlevel\API-MS-Win-devices-config-L1-1-0.dll 30
C:\Windows\system32\downlevel\API-MS-Win-devices-config-L1-1-1.dll 35
C:\Windows\system32\downlevel\API-MS-Win-Eventing-ClassicProvider-L1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-eventing-consumer-l1-1-0.dll 30
C:\Windows\system32\downlevel\API-MS-Win-Eventing-Controller-L1-1-0.dll 36
C:\Windows\system32\downlevel\API-MS-Win-Eventing-Legacy-L1-1-0.dll 33
C:\Windows\system32\downlevel\API-MS-Win-Eventing-Provider-L1-1-0.dll 27
C:\Windows\system32\downlevel\API-MS-Win-EventLog-Legacy-L1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-security-base-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-security-cryptoapi-l1-1-0.dll 33
C:\Windows\system32\downlevel\API-MS-Win-Security-Lsalookup-L2-1-0.dll 32
C:\Windows\system32\downlevel\API-MS-Win-Security-Lsalookup-L2-1-1.dll 32
C:\Windows\system32\downlevel\API-MS-Win-security-lsapolicy-l1-1-0.dll 32
C:\Windows\system32\downlevel\API-MS-Win-security-provider-L1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-security-sddl-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-service-core-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-service-core-l1-1-1.dll 32
C:\Windows\system32\downlevel\api-ms-win-service-management-l1-1-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-service-management-l2-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-service-private-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-service-private-l1-1-1.dll 35
C:\Windows\system32\downlevel\api-ms-win-service-winsvc-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-shcore-stream-l1-1-0.dll 30
C:\Windows\system32\drivers\UMDF\SDFLauncher.dll 35
C:\Windows\system32\DriverStore\FileRepository\sdflauncher.inf_amd64_1ea082c6cf8f6982\SDFLauncher.dll 35
C:\Windows\system32\IME\IMETC\IMTCTRLN.DLL 27
C:\Windows\system32\IME\SHARED\IMEDICAPICCPS.DLL 35
C:\Windows\system32\IME\SHARED\IMESEARCHPS.DLL 30
C:\Windows\system32\kd.dll 32
C:\Windows\system32\kd_02_1af4.dll 35
C:\Windows\system32\kd_07_1415.dll 30
C:\Windows\system32\kdnet_uart16550.dll 36
C:\Windows\system32\kdstub.dll 41
C:\Windows\system32\ksuser.dll 38
C:\Windows\system32\microsoft-windows-battery-events.dll 32
C:\Windows\system32\microsoft-windows-hal-events.dll 33
C:\Windows\system32\microsoft-windows-sleepstudy-events.dll 33
C:\Windows\system32\msdmo.dll 32
C:\Windows\system32\NDKPing.exe 32
C:\Windows\system32\oobe\FirstLogonAnim.exe 40
C:\Windows\system32\pcwum.dll 33
C:\Windows\system32\prproc.exe 36
C:\Windows\system32\psapi.dll 33
C:\Windows\system32\ResetEngine.exe 32
C:\WINDOWS\system32\ResetEngine.exe 38
C:\WINDOWS\system32\ScriptRunner.exe 35
C:\Windows\system32\setupetw.dll 30
C:\Windows\system32\sfc.dll 33
C:\Windows\system32\SlideToShutDown.exe 30
C:\Windows\system32\smphost.dll 33
C:\Windows\system32\spwizres.dll 35
C:\Windows\system32\streamci.dll 33
C:\Windows\system32\ttdloader.dll 36
C:\Windows\system32\UtilityVmSysprep.dll 32
C:\Windows\system32\uxlibres.dll 36
C:\Windows\system32\VmApplicationHealthMonitorProxy.dll 32
C:\Windows\system32\wbem\Microsoft.AppV.AppVClientWmi.dll 33
C:\Windows\system32\winnsi.dll 25
C:\Windows\system32\wshhyperv.dll 30
C:\Windows\system32\wshunix.dll 30
C:\Windows\system32\wuauclt.exe 30
C:\Windows\SysWOW64\AppVClientPS.dll 30
C:\Windows\SysWOW64\AppVSentinel.dll 35
C:\Windows\SysWOW64\AppVTerminator.dll 32
C:\Windows\SysWOW64\avrt.dll 36
C:\Windows\SysWOW64\backgroundTaskHost.exe 33
C:\Windows\SysWOW64\BOOTVID.DLL 40
C:\Windows\SysWOW64\CameraSettingsUIHost.exe 32
C:\Windows\SysWOW64\DefaultDeviceManager.dll 35
C:\Windows\SysWOW64\dllhost.exe 29
C:\Windows\SysWOW64\downlevel\api-ms-win-base-util-l1-1-0.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-com-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-comm-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-console-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-datetime-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-datetime-l1-1-1.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-debug-l1-1-0.dll 29
C:\Windows\SysWOW64\downlevel\api-ms-win-core-debug-l1-1-1.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-delayload-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-errorhandling-l1-1-0.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-core-errorhandling-l1-1-1.dll 36
C:\Windows\SysWOW64\downlevel\api-ms-win-core-fibers-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-fibers-l1-1-1.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-file-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-file-l1-2-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-file-l1-2-1.dll 35
C:\Windows\SysWOW64\downlevel\API-MS-Win-core-file-l2-1-0.dll 35
C:\Windows\SysWOW64\downlevel\API-MS-Win-core-file-l2-1-1.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-handle-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-heap-l1-1-0.dll 38
C:\Windows\SysWOW64\downlevel\API-MS-Win-Core-Heap-Obsolete-L1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-interlocked-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-io-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-io-l1-1-1.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-kernel32-legacy-l1-1-0.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-core-kernel32-legacy-l1-1-1.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-Core-Kernel32-Private-L1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-Core-Kernel32-Private-L1-1-1.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-libraryloader-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-libraryloader-l1-1-1.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-localization-l1-2-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-localization-l1-2-1.dll 35
C:\Windows\SysWOW64\downlevel\API-MS-Win-core-localization-obsolete-l1-2-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-memory-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-memory-l1-1-1.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-memory-l1-1-2.dll 29
C:\Windows\SysWOW64\downlevel\api-ms-win-core-namedpipe-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-privateprofile-l1-1-0.dll 29
C:\Windows\SysWOW64\downlevel\api-ms-win-core-privateprofile-l1-1-1.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processenvironment-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processenvironment-l1-2-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processthreads-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processthreads-l1-1-1.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processthreads-l1-1-2.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processtopology-obsolete-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-profile-l1-1-0.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-core-realtime-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-registry-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-registry-l2-1-0.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-core-rtlsupport-l1-1-0.dll 36
C:\Windows\SysWOW64\downlevel\api-ms-win-core-shlwapi-legacy-l1-1-0.dll 36
C:\Windows\SysWOW64\downlevel\api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 41
C:\Windows\SysWOW64\downlevel\api-ms-win-core-shutdown-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-stringansi-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-string-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\API-MS-Win-core-string-l2-1-0.dll 29
C:\Windows\SysWOW64\downlevel\api-ms-win-core-stringloader-l1-1-1.dll 35
C:\Windows\SysWOW64\downlevel\API-MS-Win-core-string-obsolete-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-synch-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-synch-l1-2-0.dll 36
C:\Windows\SysWOW64\downlevel\api-ms-win-core-sysinfo-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-sysinfo-l1-2-0.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-core-sysinfo-l1-2-1.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-threadpool-l1-2-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-threadpool-legacy-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-threadpool-private-l1-1-0.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-timezone-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-url-l1-1-0.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-core-util-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-version-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-wow64-l1-1-0.dll 29
C:\Windows\SysWOW64\downlevel\api-ms-win-core-xstate-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\API-MS-Win-core-xstate-l2-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-conio-l1-1-0.dll 36
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-convert-l1-1-0.dll 36
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-environment-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-filesystem-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-heap-l1-1-0.dll 36
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-locale-l1-1-0.dll 27
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-math-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-multibyte-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-process-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-runtime-l1-1-0.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-stdio-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-string-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-time-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-utility-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-devices-config-L1-1-0.dll 29
C:\Windows\SysWOW64\downlevel\API-MS-Win-devices-config-L1-1-1.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-Eventing-ClassicProvider-L1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-eventing-consumer-l1-1-0.dll 30
C:\Windows\SysWOW64\downlevel\API-MS-Win-Eventing-Controller-L1-1-0.dll 40
C:\Windows\SysWOW64\downlevel\API-MS-Win-Eventing-Legacy-L1-1-0.dll 40
C:\Windows\SysWOW64\downlevel\API-MS-Win-Eventing-Provider-L1-1-0.dll 36
C:\Windows\SysWOW64\downlevel\API-MS-Win-EventLog-Legacy-L1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-security-base-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-security-cryptoapi-l1-1-0.dll 30
C:\Windows\SysWOW64\downlevel\API-MS-Win-Security-Lsalookup-L2-1-0.dll 33
C:\Windows\SysWOW64\downlevel\API-MS-Win-Security-Lsalookup-L2-1-1.dll 35
C:\Windows\SysWOW64\downlevel\API-MS-Win-security-lsapolicy-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-security-provider-L1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-security-sddl-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-service-core-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-service-core-l1-1-1.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-service-management-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-service-management-l2-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-service-private-l1-1-0.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-service-private-l1-1-1.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-service-winsvc-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-shcore-stream-l1-1-0.dll 35
C:\Windows\SysWOW64\dsrole.dll 38
C:\Windows\SysWOW64\fltLib.dll 33
C:\Windows\SysWOW64\IME\IMETC\IMTCTRLN.DLL 29
C:\Windows\SysWOW64\IME\SHARED\imecfmps.dll 36
C:\Windows\SysWOW64\IME\SHARED\IMEDICAPICCPS.DLL 35
C:\Windows\SysWOW64\IME\SHARED\IMESEARCHPS.DLL 30
C:\Windows\SysWOW64\ksuser.dll 32
C:\Windows\SysWOW64\LocationFrameworkPS.dll 33
C:\Windows\SysWOW64\pcwum.dll 35
C:\Windows\SysWOW64\psapi.dll 35
C:\Windows\SysWOW64\sfc.dll 38
C:\Windows\SysWOW64\smphost.dll 27
C:\Windows\SysWOW64\ttdloader.dll 35
C:\Windows\SysWOW64\uxlibres.dll 33
C:\Windows\SysWOW64\wbem\Microsoft.AppV.AppVClientWmi.dll 30
C:\Windows\SysWOW64\winnsi.dll 32
C:\Windows\SysWOW64\wshhyperv.dll 32
C:\Windows\SysWOW64\wshunix.dll 32

Possible Misuse

The following table contains possible examples of dsrole.dll being misused. While dsrole.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
signature-base gen_excel_xll_addin_suspicious.yar $cs1 = “dsrole.dll” CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.