dsrole.dll

  • File Path: C:\Windows\SysWOW64\dsrole.dll
  • Description: DS Setup Client DLL

Hashes

Type Hash
MD5 C57961BC20A1DC15D28E8F75D9FCF3B0
SHA1 8040A2C507FE20B3795FE47841FAE7497A085CC4
SHA256 755C441EB39EB1F6F8F36B288F664DD77E01AFEE784309489DC4BEB0E42C66E2
SHA384 7350879308ECC31564BE35732D77D19CC94F25E889BB8FA7FCC596478C1A87945816D845091A706267EED8CFC41B20B9
SHA512 5B5DFC694E500307D9CD8BC2144187D05E3BD1EDD43357F03758453E7CC5021F39FAF64C053A9F2DBB10AB8AF4C59E245D77A136729CD5344D43ECD66FB6E1FC
SSDEEP 384:/qiXMqyXiJzj5xWZAVY4cnW1CWKAD1IDBRJJHEGGw6lx2+tJ:Pc1i5dXcy2oI1PBwptJ
IMP C9171916433A50E59F44F810639B1841
PESHA1 3C5E5D7D978F93FF1E2A24C27E7F72819D979B68
PE256 C2EEE5428B22A871DB8571FEC66FBF69B645FF9BEDE05E3716DEDF4B37188F5A

DLL Exports:

Function Name Ordinal Type
DsRoleGetPrimaryDomainInformation 2 Exported Function
DsRoleFreeMemory 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DSROLE.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/755c441eb39eb1f6f8f36b288f664dd77e01afee784309489dc4beb0e42c66e2/detection/

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Common Files\Microsoft Shared\ink\TabTip32.exe 30
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\UIAVerify\WUIALoggerXml.dll 35
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\UIAVerify\WUIALoggerXml.dll 38
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\dumpchk.exe 33
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\rtlist.exe 30
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x64\api-ms-win-crt-heap-l1-1-0.dll 35
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x64\api-ms-win-crt-math-l1-1-0.dll 33
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x64\api-ms-win-crt-multibyte-l1-1-0.dll 30
C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\api-ms-win-core-datetime-l1-1-0.dll 44
C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\api-ms-win-core-debug-l1-1-0.dll 36
C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\api-ms-win-crt-time-l1-1-0.dll 35
C:\Windows\system32\69fe178f-26e7-43a9-aa7d-2b616b672dde_eventlogservice.dll 29
C:\Windows\system32\AppVClientPS.dll 29
C:\Windows\system32\AppVSentinel.dll 36
C:\Windows\system32\AppVTerminator.dll 33
C:\Windows\system32\avrt.dll 33
C:\Windows\system32\backgroundTaskHost.exe 29
C:\Windows\system32\bootstr.dll 32
C:\Windows\system32\BOOTVID.DLL 30
C:\Windows\system32\computelibeventlog.dll 30
C:\Windows\system32\cryptbase.dll 36
C:\Windows\system32\DefaultDeviceManager.dll 32
C:\Windows\system32\DeviceCensus.exe 30
C:\WINDOWS\system32\DeviceCensus.exe 29
C:\Windows\system32\dllhost.exe 36
C:\Windows\system32\downlevel\api-ms-win-base-util-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-com-l1-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-core-comm-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-console-l1-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-core-datetime-l1-1-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-datetime-l1-1-1.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-debug-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-debug-l1-1-1.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-delayload-l1-1-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-errorhandling-l1-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-core-errorhandling-l1-1-1.dll 40
C:\Windows\system32\downlevel\api-ms-win-core-fibers-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-fibers-l1-1-1.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-file-l1-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-core-file-l1-2-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-file-l1-2-1.dll 35
C:\Windows\system32\downlevel\API-MS-Win-core-file-l2-1-0.dll 38
C:\Windows\system32\downlevel\API-MS-Win-core-file-l2-1-1.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-handle-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-heap-l1-1-0.dll 32
C:\Windows\system32\downlevel\API-MS-Win-Core-Heap-Obsolete-L1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-interlocked-l1-1-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-io-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-io-l1-1-1.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-kernel32-legacy-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-kernel32-legacy-l1-1-1.dll 35
C:\Windows\system32\downlevel\API-MS-Win-Core-Kernel32-Private-L1-1-0.dll 30
C:\Windows\system32\downlevel\API-MS-Win-Core-Kernel32-Private-L1-1-1.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-libraryloader-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-libraryloader-l1-1-1.dll 40
C:\Windows\system32\downlevel\api-ms-win-core-localization-l1-2-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-localization-l1-2-1.dll 35
C:\Windows\system32\downlevel\API-MS-Win-core-localization-obsolete-l1-2-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-memory-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-memory-l1-1-1.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-memory-l1-1-2.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-namedpipe-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-privateprofile-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-privateprofile-l1-1-1.dll 38
C:\Windows\system32\downlevel\api-ms-win-core-processenvironment-l1-1-0.dll 40
C:\Windows\system32\downlevel\api-ms-win-core-processenvironment-l1-2-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-processthreads-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-processthreads-l1-1-1.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-processthreads-l1-1-2.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-processtopology-obsolete-l1-1-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-profile-l1-1-0.dll 35
C:\Windows\system32\downlevel\api-ms-win-core-realtime-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-core-registry-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-registry-l2-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-core-rtlsupport-l1-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-core-shlwapi-legacy-l1-1-0.dll 40
C:\Windows\system32\downlevel\api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-core-shutdown-l1-1-0.dll 52
C:\Windows\system32\downlevel\api-ms-win-core-stringansi-l1-1-0.dll 40
C:\Windows\system32\downlevel\api-ms-win-core-string-l1-1-0.dll 35
C:\Windows\system32\downlevel\API-MS-Win-core-string-l2-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-stringloader-l1-1-1.dll 29
C:\Windows\system32\downlevel\API-MS-Win-core-string-obsolete-l1-1-0.dll 40
C:\Windows\system32\downlevel\api-ms-win-core-synch-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-core-synch-l1-2-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-sysinfo-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-sysinfo-l1-2-0.dll 54
C:\Windows\system32\downlevel\api-ms-win-core-sysinfo-l1-2-1.dll 52
C:\Windows\system32\downlevel\api-ms-win-core-threadpool-l1-2-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-threadpool-legacy-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-core-threadpool-private-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-core-timezone-l1-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-core-url-l1-1-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-util-l1-1-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-version-l1-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-core-wow64-l1-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-core-xstate-l1-1-0.dll 33
C:\Windows\system32\downlevel\API-MS-Win-core-xstate-l2-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-crt-conio-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-crt-convert-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-crt-environment-l1-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-crt-filesystem-l1-1-0.dll 40
C:\Windows\system32\downlevel\api-ms-win-crt-heap-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-crt-locale-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-crt-math-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-crt-multibyte-l1-1-0.dll 27
C:\Windows\system32\downlevel\api-ms-win-crt-process-l1-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-crt-runtime-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-crt-stdio-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-crt-string-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-crt-time-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-crt-utility-l1-1-0.dll 35
C:\Windows\system32\downlevel\API-MS-Win-devices-config-L1-1-0.dll 54
C:\Windows\system32\downlevel\API-MS-Win-devices-config-L1-1-1.dll 36
C:\Windows\system32\downlevel\API-MS-Win-Eventing-ClassicProvider-L1-1-0.dll 50
C:\Windows\system32\downlevel\api-ms-win-eventing-consumer-l1-1-0.dll 33
C:\Windows\system32\downlevel\API-MS-Win-Eventing-Controller-L1-1-0.dll 40
C:\Windows\system32\downlevel\API-MS-Win-Eventing-Legacy-L1-1-0.dll 33
C:\Windows\system32\downlevel\API-MS-Win-Eventing-Provider-L1-1-0.dll 30
C:\Windows\system32\downlevel\API-MS-Win-EventLog-Legacy-L1-1-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-security-base-l1-1-0.dll 30
C:\Windows\system32\downlevel\api-ms-win-security-cryptoapi-l1-1-0.dll 38
C:\Windows\system32\downlevel\API-MS-Win-Security-Lsalookup-L2-1-0.dll 33
C:\Windows\system32\downlevel\API-MS-Win-Security-Lsalookup-L2-1-1.dll 33
C:\Windows\system32\downlevel\API-MS-Win-security-lsapolicy-l1-1-0.dll 54
C:\Windows\system32\downlevel\API-MS-Win-security-provider-L1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-security-sddl-l1-1-0.dll 38
C:\Windows\system32\downlevel\api-ms-win-service-core-l1-1-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-service-core-l1-1-1.dll 35
C:\Windows\system32\downlevel\api-ms-win-service-management-l1-1-0.dll 40
C:\Windows\system32\downlevel\api-ms-win-service-management-l2-1-0.dll 40
C:\Windows\system32\downlevel\api-ms-win-service-private-l1-1-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-service-private-l1-1-1.dll 33
C:\Windows\system32\downlevel\api-ms-win-service-winsvc-l1-1-0.dll 32
C:\Windows\system32\downlevel\api-ms-win-shcore-stream-l1-1-0.dll 36
C:\Windows\system32\drivers\UMDF\SDFLauncher.dll 36
C:\Windows\system32\DriverStore\FileRepository\sdflauncher.inf_amd64_1ea082c6cf8f6982\SDFLauncher.dll 36
C:\Windows\system32\dsrole.dll 38
C:\Windows\system32\IME\IMETC\IMTCTRLN.DLL 29
C:\Windows\system32\IME\SHARED\IMEDICAPICCPS.DLL 38
C:\Windows\system32\IME\SHARED\IMESEARCHPS.DLL 35
C:\Windows\system32\kd.dll 32
C:\Windows\system32\kd_02_1af4.dll 30
C:\Windows\system32\kd_07_1415.dll 30
C:\Windows\system32\kdnet_uart16550.dll 35
C:\Windows\system32\kdstub.dll 35
C:\Windows\system32\ksuser.dll 33
C:\Windows\system32\microsoft-windows-battery-events.dll 27
C:\Windows\system32\microsoft-windows-hal-events.dll 32
C:\Windows\system32\microsoft-windows-sleepstudy-events.dll 35
C:\Windows\system32\msdmo.dll 29
C:\Windows\system32\NDKPing.exe 36
C:\Windows\system32\oobe\FirstLogonAnim.exe 33
C:\Windows\system32\pcwum.dll 32
C:\Windows\system32\prproc.exe 33
C:\Windows\system32\psapi.dll 33
C:\Windows\system32\ResetEngine.exe 29
C:\WINDOWS\system32\ResetEngine.exe 30
C:\WINDOWS\system32\ScriptRunner.exe 30
C:\Windows\system32\setupetw.dll 30
C:\Windows\system32\sfc.dll 36
C:\Windows\system32\SlideToShutDown.exe 36
C:\Windows\system32\smphost.dll 25
C:\Windows\system32\spwizres.dll 35
C:\Windows\system32\streamci.dll 30
C:\Windows\system32\ttdloader.dll 29
C:\Windows\system32\UtilityVmSysprep.dll 30
C:\Windows\system32\uxlibres.dll 33
C:\Windows\system32\VmApplicationHealthMonitorProxy.dll 32
C:\Windows\system32\wbem\Microsoft.AppV.AppVClientWmi.dll 33
C:\Windows\system32\winnsi.dll 32
C:\Windows\system32\wshhyperv.dll 38
C:\Windows\system32\wshunix.dll 36
C:\Windows\system32\wuauclt.exe 32
C:\Windows\SysWOW64\AppVClientPS.dll 36
C:\Windows\SysWOW64\AppVSentinel.dll 35
C:\Windows\SysWOW64\AppVTerminator.dll 32
C:\Windows\SysWOW64\avrt.dll 30
C:\Windows\SysWOW64\backgroundTaskHost.exe 32
C:\Windows\SysWOW64\BOOTVID.DLL 29
C:\Windows\SysWOW64\CameraSettingsUIHost.exe 30
C:\Windows\SysWOW64\DefaultDeviceManager.dll 29
C:\Windows\SysWOW64\dllhost.exe 33
C:\Windows\SysWOW64\downlevel\api-ms-win-base-util-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-com-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-comm-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-console-l1-1-0.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-datetime-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-datetime-l1-1-1.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-debug-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-debug-l1-1-1.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-delayload-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-errorhandling-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-errorhandling-l1-1-1.dll 36
C:\Windows\SysWOW64\downlevel\api-ms-win-core-fibers-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-fibers-l1-1-1.dll 36
C:\Windows\SysWOW64\downlevel\api-ms-win-core-file-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-file-l1-2-0.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-file-l1-2-1.dll 33
C:\Windows\SysWOW64\downlevel\API-MS-Win-core-file-l2-1-0.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-core-file-l2-1-1.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-handle-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-heap-l1-1-0.dll 49
C:\Windows\SysWOW64\downlevel\API-MS-Win-Core-Heap-Obsolete-L1-1-0.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-interlocked-l1-1-0.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-core-io-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-io-l1-1-1.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-kernel32-legacy-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-kernel32-legacy-l1-1-1.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-Core-Kernel32-Private-L1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-Core-Kernel32-Private-L1-1-1.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-libraryloader-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-libraryloader-l1-1-1.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-core-localization-l1-2-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-localization-l1-2-1.dll 30
C:\Windows\SysWOW64\downlevel\API-MS-Win-core-localization-obsolete-l1-2-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-memory-l1-1-0.dll 29
C:\Windows\SysWOW64\downlevel\api-ms-win-core-memory-l1-1-1.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-memory-l1-1-2.dll 36
C:\Windows\SysWOW64\downlevel\api-ms-win-core-namedpipe-l1-1-0.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-core-privateprofile-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-privateprofile-l1-1-1.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processenvironment-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processenvironment-l1-2-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processthreads-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processthreads-l1-1-1.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processthreads-l1-1-2.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processtopology-obsolete-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-profile-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-realtime-l1-1-0.dll 43
C:\Windows\SysWOW64\downlevel\api-ms-win-core-registry-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-registry-l2-1-0.dll 36
C:\Windows\SysWOW64\downlevel\api-ms-win-core-rtlsupport-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-shlwapi-legacy-l1-1-0.dll 40
C:\Windows\SysWOW64\downlevel\api-ms-win-core-shlwapi-obsolete-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-shutdown-l1-1-0.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-core-stringansi-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-string-l1-1-0.dll 30
C:\Windows\SysWOW64\downlevel\API-MS-Win-core-string-l2-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-stringloader-l1-1-1.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-core-string-obsolete-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-synch-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-synch-l1-2-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-sysinfo-l1-1-0.dll 40
C:\Windows\SysWOW64\downlevel\api-ms-win-core-sysinfo-l1-2-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-sysinfo-l1-2-1.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-threadpool-l1-2-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-threadpool-legacy-l1-1-0.dll 52
C:\Windows\SysWOW64\downlevel\api-ms-win-core-threadpool-private-l1-1-0.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-timezone-l1-1-0.dll 41
C:\Windows\SysWOW64\downlevel\api-ms-win-core-url-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-util-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-version-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-core-wow64-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-xstate-l1-1-0.dll 36
C:\Windows\SysWOW64\downlevel\API-MS-Win-core-xstate-l2-1-0.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-conio-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-convert-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-environment-l1-1-0.dll 40
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-filesystem-l1-1-0.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-heap-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-locale-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-math-l1-1-0.dll 27
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-multibyte-l1-1-0.dll 29
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-process-l1-1-0.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-runtime-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-stdio-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-string-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-time-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-utility-l1-1-0.dll 35
C:\Windows\SysWOW64\downlevel\API-MS-Win-devices-config-L1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\API-MS-Win-devices-config-L1-1-1.dll 36
C:\Windows\SysWOW64\downlevel\API-MS-Win-Eventing-ClassicProvider-L1-1-0.dll 40
C:\Windows\SysWOW64\downlevel\api-ms-win-eventing-consumer-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\API-MS-Win-Eventing-Controller-L1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-Eventing-Legacy-L1-1-0.dll 36
C:\Windows\SysWOW64\downlevel\API-MS-Win-Eventing-Provider-L1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\API-MS-Win-EventLog-Legacy-L1-1-0.dll 29
C:\Windows\SysWOW64\downlevel\api-ms-win-security-base-l1-1-0.dll 29
C:\Windows\SysWOW64\downlevel\api-ms-win-security-cryptoapi-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\API-MS-Win-Security-Lsalookup-L2-1-0.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-Security-Lsalookup-L2-1-1.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-security-lsapolicy-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-security-provider-L1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-security-sddl-l1-1-0.dll 29
C:\Windows\SysWOW64\downlevel\api-ms-win-service-core-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-service-core-l1-1-1.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-service-management-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-service-management-l2-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-service-private-l1-1-0.dll 38
C:\Windows\SysWOW64\downlevel\api-ms-win-service-private-l1-1-1.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-service-winsvc-l1-1-0.dll 36
C:\Windows\SysWOW64\downlevel\api-ms-win-shcore-stream-l1-1-0.dll 35
C:\Windows\SysWOW64\fltLib.dll 33
C:\Windows\SysWOW64\IME\IMETC\IMTCTRLN.DLL 30
C:\Windows\SysWOW64\IME\SHARED\imecfmps.dll 30
C:\Windows\SysWOW64\IME\SHARED\IMEDICAPICCPS.DLL 25
C:\Windows\SysWOW64\IME\SHARED\IMESEARCHPS.DLL 35
C:\Windows\SysWOW64\ksuser.dll 32
C:\Windows\SysWOW64\LocationFrameworkPS.dll 27
C:\Windows\SysWOW64\nsi.dll 41
C:\Windows\SysWOW64\pcwum.dll 35
C:\Windows\SysWOW64\psapi.dll 36
C:\Windows\SysWOW64\sfc.dll 35
C:\Windows\SysWOW64\smphost.dll 30
C:\Windows\SysWOW64\ttdloader.dll 43
C:\Windows\SysWOW64\uxlibres.dll 32
C:\Windows\SysWOW64\wbem\Microsoft.AppV.AppVClientWmi.dll 33
C:\Windows\SysWOW64\winnsi.dll 27
C:\Windows\SysWOW64\wshhyperv.dll 38
C:\Windows\SysWOW64\wshunix.dll 33

Possible Misuse

The following table contains possible examples of dsrole.dll being misused. While dsrole.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
signature-base gen_excel_xll_addin_suspicious.yar $cs1 = “dsrole.dll” CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.