ds1sc.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 5a375a5653da1186daffe339d5c5ec3d

File Size: 2.3 MB

Uploaded At: March 18, 2026, 3:08 a.m.

Views: 11

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • modengine_ext_init (Ordinal: 1, Address: 0x5c300)

Imported DLLs & Functions

ADVAPI32.dll
  • BuildExplicitAccessWithNameW (Address: 0x18021f788)
  • BuildSecurityDescriptorW (Address: 0x18021f790)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18021f798)
  • CryptAcquireContextA (Address: 0x18021f7a0)
  • CryptCreateHash (Address: 0x18021f7a8)
  • CryptDestroyHash (Address: 0x18021f7b0)
  • CryptDestroyKey (Address: 0x18021f7b8)
  • CryptEncrypt (Address: 0x18021f7c0)
  • CryptGenRandom (Address: 0x18021f7c8)
  • CryptGetHashParam (Address: 0x18021f7d0)
  • CryptHashData (Address: 0x18021f7d8)
  • CryptImportKey (Address: 0x18021f7e0)
  • CryptReleaseContext (Address: 0x18021f7e8)
  • SystemFunction036 (Address: 0x18021f7f0)
api-ms-win-core-synch-l1-2-0.dll
  • WaitOnAddress (Address: 0x18021f750)
  • WakeByAddressAll (Address: 0x18021f758)
  • WakeByAddressSingle (Address: 0x18021f760)
CRYPT32.dll
  • CertAddCertificateContextToStore (Address: 0x18021f800)
  • CertCloseStore (Address: 0x18021f808)
  • CertCreateCertificateChainEngine (Address: 0x18021f810)
  • CertEnumCertificatesInStore (Address: 0x18021f818)
  • CertFindCertificateInStore (Address: 0x18021f820)
  • CertFindExtension (Address: 0x18021f828)
  • CertFreeCertificateChain (Address: 0x18021f830)
  • CertFreeCertificateChainEngine (Address: 0x18021f838)
  • CertFreeCertificateContext (Address: 0x18021f840)
  • CertGetCertificateChain (Address: 0x18021f848)
  • CertGetNameStringA (Address: 0x18021f850)
  • CertOpenStore (Address: 0x18021f858)
  • CryptDecodeObjectEx (Address: 0x18021f860)
  • CryptQueryObject (Address: 0x18021f868)
  • CryptStringToBinaryA (Address: 0x18021f870)
  • PFXImportCertStore (Address: 0x18021f878)
kernel32.dll
  • AcquireSRWLockExclusive (Address: 0x18021f060)
  • AddVectoredExceptionHandler (Address: 0x18021f068)
  • AreFileApisANSI (Address: 0x18021f070)
  • CloseHandle (Address: 0x18021f078)
  • CompareStringW (Address: 0x18021f080)
  • CreateDirectoryW (Address: 0x18021f088)
  • CreateEventW (Address: 0x18021f090)
  • CreateFileA (Address: 0x18021f098)
  • CreateFileW (Address: 0x18021f0a0)
  • CreateMutexA (Address: 0x18021f0a8)
  • CreateNamedPipeW (Address: 0x18021f0b0)
  • CreateProcessW (Address: 0x18021f0b8)
  • CreateThread (Address: 0x18021f0c0)
  • CreateToolhelp32Snapshot (Address: 0x18021f0c8)
  • DecodePointer (Address: 0x18021f0d0)
  • DeleteCriticalSection (Address: 0x18021f0d8)
  • DeleteFileW (Address: 0x18021f0e0)
  • EncodePointer (Address: 0x18021f0e8)
  • EnterCriticalSection (Address: 0x18021f0f0)
  • EnumSystemLocalesW (Address: 0x18021f0f8)
  • ExitProcess (Address: 0x18021f100)
  • ExitThread (Address: 0x18021f108)
  • FileTimeToSystemTime (Address: 0x18021f110)
  • FindClose (Address: 0x18021f118)
  • FindFirstFileExW (Address: 0x18021f120)
  • FindFirstFileW (Address: 0x18021f128)
  • FindNextFileW (Address: 0x18021f130)
  • FlsAlloc (Address: 0x18021f138)
  • FlsFree (Address: 0x18021f140)
  • FlsGetValue (Address: 0x18021f148)
  • FlsSetValue (Address: 0x18021f150)
  • FlushFileBuffers (Address: 0x18021f158)
  • FlushInstructionCache (Address: 0x18021f160)
  • FormatMessageA (Address: 0x18021f168)
  • FormatMessageW (Address: 0x18021f170)
  • FreeEnvironmentStringsW (Address: 0x18021f178)
  • FreeLibrary (Address: 0x18021f180)
  • FreeLibraryAndExitThread (Address: 0x18021f188)
  • GetACP (Address: 0x18021f190)
  • GetCommandLineA (Address: 0x18021f1a0)
  • GetCommandLineW (Address: 0x18021f1a8)
  • GetConsoleMode (Address: 0x18021f1b0)
  • GetConsoleOutputCP (Address: 0x18021f1b8)
  • GetCPInfo (Address: 0x18021f198)
  • GetCurrentDirectoryW (Address: 0x18021f1c0)
  • GetCurrentProcess (Address: 0x18021f1c8)
  • GetCurrentProcessId (Address: 0x18021f1d0)
  • GetCurrentThreadId (Address: 0x18021f1d8)
  • GetDateFormatW (Address: 0x18021f1e0)
  • GetDriveTypeW (Address: 0x18021f1e8)
  • GetEnvironmentStringsW (Address: 0x18021f1f0)
  • GetEnvironmentVariableA (Address: 0x18021f1f8)
  • GetFileAttributesExW (Address: 0x18021f200)
  • GetFileAttributesW (Address: 0x18021f208)
  • GetFileInformationByHandle (Address: 0x18021f210)
  • GetFileInformationByHandleEx (Address: 0x18021f218)
  • GetFileSizeEx (Address: 0x18021f220)
  • GetFileTime (Address: 0x18021f228)
  • GetFileType (Address: 0x18021f230)
  • GetFullPathNameW (Address: 0x18021f238)
  • GetLastError (Address: 0x18021f240)
  • GetLocaleInfoEx (Address: 0x18021f250)
  • GetLocaleInfoW (Address: 0x18021f258)
  • GetLocalTime (Address: 0x18021f248)
  • GetModuleFileNameA (Address: 0x18021f260)
  • GetModuleFileNameW (Address: 0x18021f268)
  • GetModuleHandleA (Address: 0x18021f270)
  • GetModuleHandleExA (Address: 0x18021f278)
  • GetModuleHandleExW (Address: 0x18021f280)
  • GetModuleHandleW (Address: 0x18021f288)
  • GetOEMCP (Address: 0x18021f290)
  • GetProcAddress (Address: 0x18021f298)
  • GetProcessHeap (Address: 0x18021f2a0)
  • GetStartupInfoW (Address: 0x18021f2a8)
  • GetStdHandle (Address: 0x18021f2b0)
  • GetStringTypeW (Address: 0x18021f2b8)
  • GetSystemDirectoryA (Address: 0x18021f2c0)
  • GetSystemInfo (Address: 0x18021f2c8)
  • GetSystemTimeAsFileTime (Address: 0x18021f2d0)
  • GetThreadContext (Address: 0x18021f2d8)
  • GetTickCount (Address: 0x18021f2e0)
  • GetTimeFormatW (Address: 0x18021f2e8)
  • GetTimeZoneInformation (Address: 0x18021f2f0)
  • GetUserDefaultLCID (Address: 0x18021f2f8)
  • GetVersion (Address: 0x18021f300)
  • HeapAlloc (Address: 0x18021f308)
  • HeapCreate (Address: 0x18021f310)
  • HeapFree (Address: 0x18021f318)
  • HeapReAlloc (Address: 0x18021f320)
  • HeapSize (Address: 0x18021f328)
  • InitializeCriticalSection (Address: 0x18021f340)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18021f348)
  • InitializeCriticalSectionEx (Address: 0x18021f350)
  • InitializeSListHead (Address: 0x18021f358)
  • InitOnceBeginInitialize (Address: 0x18021f330)
  • InitOnceComplete (Address: 0x18021f338)
  • InterlockedFlushSList (Address: 0x18021f360)
  • IsDebuggerPresent (Address: 0x18021f368)
  • IsProcessorFeaturePresent (Address: 0x18021f370)
  • IsValidCodePage (Address: 0x18021f378)
  • IsValidLocale (Address: 0x18021f380)
  • K32GetModuleInformation (Address: 0x18021f388)
  • LCMapStringEx (Address: 0x18021f390)
  • LCMapStringW (Address: 0x18021f398)
  • LeaveCriticalSection (Address: 0x18021f3a0)
  • LoadLibraryA (Address: 0x18021f3a8)
  • LoadLibraryExA (Address: 0x18021f3b0)
  • LoadLibraryExW (Address: 0x18021f3b8)
  • LoadLibraryW (Address: 0x18021f3c0)
  • LocalFree (Address: 0x18021f3c8)
  • LockFileEx (Address: 0x18021f3d0)
  • lstrlenW (Address: 0x18021f5c8)
  • MoveFileExA (Address: 0x18021f3d8)
  • MultiByteToWideChar (Address: 0x18021f3e0)
  • OpenProcess (Address: 0x18021f3e8)
  • OpenThread (Address: 0x18021f3f0)
  • OutputDebugStringW (Address: 0x18021f3f8)
  • PeekNamedPipe (Address: 0x18021f400)
  • QueryPerformanceCounter (Address: 0x18021f408)
  • QueryPerformanceFrequency (Address: 0x18021f410)
  • RaiseException (Address: 0x18021f418)
  • ReadConsoleW (Address: 0x18021f420)
  • ReadFile (Address: 0x18021f428)
  • ReleaseMutex (Address: 0x18021f430)
  • ReleaseSRWLockExclusive (Address: 0x18021f438)
  • RemoveDirectoryW (Address: 0x18021f440)
  • RemoveVectoredExceptionHandler (Address: 0x18021f448)
  • ResumeThread (Address: 0x18021f450)
  • RtlCaptureContext (Address: 0x18021f458)
  • RtlLookupFunctionEntry (Address: 0x18021f460)
  • RtlPcToFileHeader (Address: 0x18021f468)
  • RtlUnwind (Address: 0x18021f470)
  • RtlUnwindEx (Address: 0x18021f478)
  • RtlVirtualUnwind (Address: 0x18021f480)
  • SetConsoleCtrlHandler (Address: 0x18021f488)
  • SetEndOfFile (Address: 0x18021f490)
  • SetEnvironmentVariableW (Address: 0x18021f498)
  • SetEvent (Address: 0x18021f4a0)
  • SetFilePointerEx (Address: 0x18021f4a8)
  • SetLastError (Address: 0x18021f4b0)
  • SetNamedPipeHandleState (Address: 0x18021f4b8)
  • SetStdHandle (Address: 0x18021f4c0)
  • SetThreadContext (Address: 0x18021f4c8)
  • SetUnhandledExceptionFilter (Address: 0x18021f4d0)
  • Sleep (Address: 0x18021f4d8)
  • SleepConditionVariableSRW (Address: 0x18021f4e0)
  • SleepEx (Address: 0x18021f4e8)
  • SuspendThread (Address: 0x18021f4f0)
  • SystemTimeToTzSpecificLocalTime (Address: 0x18021f4f8)
  • TerminateProcess (Address: 0x18021f500)
  • Thread32First (Address: 0x18021f508)
  • Thread32Next (Address: 0x18021f510)
  • TlsAlloc (Address: 0x18021f518)
  • TlsFree (Address: 0x18021f520)
  • TlsGetValue (Address: 0x18021f528)
  • TlsSetValue (Address: 0x18021f530)
  • TransactNamedPipe (Address: 0x18021f538)
  • TryAcquireSRWLockExclusive (Address: 0x18021f540)
  • UnhandledExceptionFilter (Address: 0x18021f548)
  • UnlockFileEx (Address: 0x18021f550)
  • VerifyVersionInfoA (Address: 0x18021f560)
  • VerSetConditionMask (Address: 0x18021f558)
  • VirtualAlloc (Address: 0x18021f568)
  • VirtualFree (Address: 0x18021f570)
  • VirtualProtect (Address: 0x18021f578)
  • VirtualQuery (Address: 0x18021f580)
  • WaitForMultipleObjects (Address: 0x18021f588)
  • WaitForSingleObject (Address: 0x18021f590)
  • WaitForSingleObjectEx (Address: 0x18021f598)
  • WaitNamedPipeW (Address: 0x18021f5a0)
  • WakeAllConditionVariable (Address: 0x18021f5a8)
  • WideCharToMultiByte (Address: 0x18021f5b0)
  • WriteConsoleW (Address: 0x18021f5b8)
  • WriteFile (Address: 0x18021f5c0)
Normaliz.dll
  • IdnToAscii (Address: 0x18021f920)
ntdll.dll
  • NtWriteFile (Address: 0x18021f770)
  • RtlNtStatusToDosError (Address: 0x18021f778)
oleaut32.dll
  • SysFreeString (Address: 0x18021f738)
  • SysStringLen (Address: 0x18021f740)
steam_api64.dll
  • SteamAPI_GetHSteamPipe (Address: 0x18021f5f0)
  • SteamAPI_GetHSteamUser (Address: 0x18021f5f8)
  • SteamAPI_RegisterCallback (Address: 0x18021f608)
  • SteamAPI_RegisterCallResult (Address: 0x18021f600)
  • SteamAPI_UnregisterCallback (Address: 0x18021f618)
  • SteamAPI_UnregisterCallResult (Address: 0x18021f610)
USER32.dll
  • IsCharAlphaNumericA (Address: 0x18021f5d8)
  • MessageBoxA (Address: 0x18021f5e0)
WLDAP32.dll
  • (Address: 0x18021f8d8)
  • (Address: 0x18021f888)
  • (Address: 0x18021f910)
  • (Address: 0x18021f908)
  • (Address: 0x18021f900)
  • (Address: 0x18021f8f8)
  • (Address: 0x18021f8f0)
  • (Address: 0x18021f8e8)
  • (Address: 0x18021f8e0)
  • (Address: 0x18021f890)
  • (Address: 0x18021f8d0)
  • (Address: 0x18021f8c8)
  • (Address: 0x18021f8c0)
  • (Address: 0x18021f8b8)
  • (Address: 0x18021f8b0)
  • (Address: 0x18021f8a8)
  • (Address: 0x18021f8a0)
  • (Address: 0x18021f898)
WS2_32.dll
  • __WSAFDIsSet (Address: 0x18021f670)
  • accept (Address: 0x18021f678)
  • bind (Address: 0x18021f680)
  • closesocket (Address: 0x18021f688)
  • connect (Address: 0x18021f690)
  • freeaddrinfo (Address: 0x18021f698)
  • getaddrinfo (Address: 0x18021f6a0)
  • gethostname (Address: 0x18021f6a8)
  • getpeername (Address: 0x18021f6b0)
  • getsockname (Address: 0x18021f6b8)
  • getsockopt (Address: 0x18021f6c0)
  • htonl (Address: 0x18021f6c8)
  • htons (Address: 0x18021f6d0)
  • ioctlsocket (Address: 0x18021f6d8)
  • listen (Address: 0x18021f6e0)
  • ntohl (Address: 0x18021f6e8)
  • ntohs (Address: 0x18021f6f0)
  • recv (Address: 0x18021f6f8)
  • recvfrom (Address: 0x18021f700)
  • select (Address: 0x18021f708)
  • send (Address: 0x18021f710)
  • sendto (Address: 0x18021f718)
  • setsockopt (Address: 0x18021f720)
  • socket (Address: 0x18021f728)
  • WSACleanup (Address: 0x18021f628)
  • WSACloseEvent (Address: 0x18021f630)
  • WSACreateEvent (Address: 0x18021f638)
  • WSAEnumNetworkEvents (Address: 0x18021f640)
  • WSAEventSelect (Address: 0x18021f648)
  • WSAGetLastError (Address: 0x18021f650)
  • WSAIoctl (Address: 0x18021f658)
  • WSASetLastError (Address: 0x18021f660)
  • WSAStartup (Address: 0x18021f668)