home

dsound.dll

Microsoft Windows Operating System

Microsoft Corporation

It is included with Windows XP (SP2). The file has been seen being downloaded from www.dlldump.com.
Publisher:
Microsoft Corporation

Product:
Microsoft(R) Windows(R) Operating System

Description:
DirectSound

 
Part of the Windows XP (Service Pack 2) Operating System

Version:
5.3.2600.2180 (xpsp_sp2_rtm.040803-2158)

MD5:
55e148c01296696588eafa425782c3e8

SHA-1:
0242756e89d35a7962044cacb4a8ea54fd6aa3fd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 12:02:54 AM UTC  (today)

File size:
359 KB (367,616 bytes)

Product version:
5.3.2600.2180

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
dsound.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\dsound.dll

Registration
CLSIDs:
{3901CC3F-84B5-4FA4-BA35-AA8172B8A09B}, {47D4D946-62E8-11cf-93BC-444553540000}, {B0210780-89CD-11d0-AF08-00A0C925CD16}, {B2F586D4-5558-49D1-A07B-3249DBBB33C2}, {E4BCAC13-7F99-4908-9A8E-74E3BF24B6E1}, {FEA4300C-7959-4147-B26A-2377B9E7A91D}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
8/4/2004 1:27:08 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
7.10

CTPH (ssdeep):
6144:P9icMIyfGYf2g9qyYuPKcUub1hURZLL8C6cr7pZ2W0LPFsDRxwvF:P9HPyfnf2u1PKcXxhUecr7/0fF

Entry address:
0x1788

Entry point:
8B, FF, 55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 85, F6, 57, 8B, 7D, 10, 0F, 84, 6A, 1D, 01, 00, 83, FE, 01, 0F, 85, 6D, 1D, 01, 00, A1, 44, 60, F6, 73, 85, C0, 0F, 85, 13, 51, 01, 00, 57, 56, 53, E8, 59, FF, FF, FF, 85, C0, 0F, 84, 10, 51, 01, 00, 57, 56, 53, E8, 23, 00, 00, 00, 83, FE, 01, 89, 45, 0C, 0F, 85, 55, 1D, 01, 00, 85, C0, 0F, 84, FB, 50, 01, 00, 8B, 45, 0C, 5F, 5E, 5B, 5D, C2, 0C, 00, 90, 90, 90, 90, 90, 8B, FF, 55, 8B, EC, 56, 57, FF, 15, D8, 10, F1, 73, 8B, F0, FF, 15, D4, 10, F1, 73, 8B...
 
[+]

Entropy:
6.5638

Code size:
338 KB (346,112 bytes)

The file dsound.dll has been seen being distributed by the following URL.

http://www.dlldump.com/dllfiles/.../dsound.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.